EDNS Client Subnet (ECS) in CDN solution Speaker: Pham Tran Kim Chi 2
Agenda - What is EDNS Client Subnet (ECS) - How is EDNS Client Subnet (ECS) - EDNS Client Subnet in Vinadata CDN - Lesson learned 3
Recursive DNS Request
Recursive Geo IP DNS Request
Recursive Geo IP DNS Request
Recursive Geo IP DNS Request
EDNS Client Subnet (ECS)
Include client subnet EDNS Client Subnet (ECS) • RFC 7871 - https://tools.ietf.org/html/rfc7871 • Extension Mechanisms for DNS (EDNS0) option that is in active use to carry information about the network that originated a DNS query and the network for which the subsequent response can be cached. Include client subnet
EDNS Client Subnet (ECS)
Use of DNS servers in Việt Nam • ISP DNS server • Google DNS server • Open DNS server • Others
How CDN works • GEO IP • Multiple criteria • This is called mapping • Anycast: the content is served from the location the request is received. • DNS based: CDN decides where to best served content from based on DNS resolver/ client subnet. • Multiple criteria • Latency • Packet loss • Throughput • CPU load on server • ……. • This is called mapping • The better the mapping, the better the CDN.
CDN with Anycast
CDN with EDNS Client Subnet
EDNS Client Subnet in Vinadata CDN • Client requests www.vng.com.vn from Google DNS. • Google DNS asks VNG authoritative DNS with client subnet • VNG DNS lookup client subnet and answers with an optimal server for Google DNS. • Google DNS give answer for client. • Client request content from the optimal server
Lesson Learned • Deployment concerns • Privacy concerns • Customize DNS Software to support EDNS. • Ask to be added in EDNS support list. • Privacy concerns • Network scanning. • Security concerns • DNS request increases. • Cache pollution.
Thanks! Contact us: VINADATA JSC Helios Building, Quang Trung Software City, Dist.12 Ho Chi Minh City, Vietnam support@vinadata.vn www.vinadata.vn 17